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DETAILED ACTION 

1 . This action is in reply to applicant's correspondence of 14 July 2009. 

2. Claims 1,3-11 and 13-20 are pending for examination. 

3. Claims 1,3-11 and 13-20 remain rejected. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A pa lent may not lie obtained though the in\ ention is not identically disclosed or described as set forth in section 102 of this title, if 
the differences between the subject matter sought to be patented and the prior art are such that the subject matter as a whole would 
have been obvious at the time the invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 1,3-11 and 13-20 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Clough et al, U.S. Patent No. 5,379,057 and further in view of Ultimaco Safeware AG, 'SafeGuard 
Easy', Ultimaco Safeware AG, 08/2000, entire document, 

http://web.archive.org/web/200003011 32302/www.iitimaco.de/engiish/indexl .htm ('Ultimaco'). 

It is noted that Clough et al, does not disclose the specific use of a pre-boot 
authentication/security application per se as an installable application to perform the fundamental 
computer access control functions insofar as security/system use authorization for multiple users 
is concerned. However, the examiner asserts that it would have been obvious to one ordinary 
skill in the art at the time the invention was made for a portable computer system of Clough et al 
to require controlled access by users, especially in the case of a portable (i.e., legitimately or 
illegitimately removable for access thereof), via the installation of the Ultimaco 'SafeGuard Easy' 
pre operating system access control application. 
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Such motivation to combine would be obvious in light of the Ultimaco inventive concept 
is clearly directed to at least a standard system/PC product environment (i.e., MS Windows ™), 
where standard system/PC products that are portable and used by multiple users/applications 
would clearly required controlled access to the system resources (i.e., the Ultimaco 'SafeGuard 
Easy' encrypts/secures the hard drive for subsequent decryption/access during the operating 
system boot process). 

A recitation directed to the manner in which a claimed apparatus is intended to be used 
does not distinguish the claimed apparatus from the prior art if prior art has the capability to do 
so (See MPEP 21 14 and Ex Parte Masham, 2 USPQ2d 1647 (1987). 



Prior Art's Broad Disclosure vs. Preferred Embodiments 
As concerning the scope of applicability of cited references used in any art rejections 
below, as per MPEP § 2123, subsection R.5. Rejection Over Prior Art's Broad Disclosure 
Instead of Preferred Embodiments: 



I. PATENTS ARE RELEVANT AS PRIOR ART FOR ALL THEY CONTAIN "The use of patents as references is not limited to 
what the patentees describe as their own i in en lions or to the problems with which they are concerned. They are part of the literature of the art, 
relevant for all they contain." In re Heck, 699 F.2d 1331, 1332-33, 216 USPQ 1038, 1039 (Fed. Cir. 1983) (quoting In re Lemelson, 397 F.2d 
1006, 1009, 158 USPQ 275, 277 (CCPA 1968)). A reference may be relied upon for all that it would have reasonably suggested to one having 
ordinary skill the art, including nonpreferred embodiments. Merck & Co. v. Biocraft Laboratories, 874 F.2d 804, 10 USPQ2d 1843 (Fed. Cir.), 
cert, denied, 493 U.S. 975 (1989). See also • Lpsher-Simth Labs. v. Pamlab. LLC. 412 F.3d 1319, 1323, 75 USPQ2d 1213, 1215 (Fed. Cir. 
2005 )( reference disclosing optional inclusion of a particular component teaches compositions that both do and do not contain that component); 
Celeritas Technologies Ltd. v. Rockwell International Corp., 150 F.3d 1354, 1361, 47 USPQ2d 1516, 1522-23 (Fed. Cir. 1998) (The court held 
that the prior art anticipated the claims even though it taught away from the claimed invention.). >See also MPEP § 213 1.05 and § 2145, 
subsection X.D.. which discuss prior art that teaches away from the claimed invention in the context of anticipation and ob\ iousness. 
respectively.< 

II. NONPREFERRED AND ALTERNATIVE EMBODIMENTS CONSTITUTE PRIOR ART 

Disclosed example.-, and preferred embodiments do not constitute a teaching awa\ from a broader disclosure or nonpreferred embodiments. In re 
Susi, 440 F.2d 442. 1 69 I "SPQ 423 (CCPA 1971). "A known or obvious composition does not become patentable simply because it has been 
described as somewhat inferior to some other product for the same use." In reGurley, 27 F.3d 551, 554, 31 USPQ2d 1130, 1132 (Fed. Cir. 1994). 
Furthermore, "[f]he prior art's mere disclosure of more than one alternative does not constitute a teaching away from any of these alternatives 
because such disclosure does not criticize, discredit, or otherwise discourage the solution claimed...." In re Fulton, 391 F.3d 1195, 1201, 73 
USPQ2d 1141, 1146 (Fed. Cir. 2004). 



Clough et al generally teaches and suggests (i.e., Abstract, figures 1-14 and associated 



descriptions in general) the limitations set forth in the claims below. 
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5. As per claim 1; "A method comprising: 
receiving a password through 

a graphical user interface [figures 1-5 and accompanying descriptions, col. 1, lines 
59 -col. 4, line 3, whereas the portable integrated computer system with associated touch 
screen, software configurable keyboard, optional memory configurations, installable 
applications (e.g., downloadable or external memory transferable) etc., comprising a 
microprocessor based controller and associated integrated peripheral logic/circuitry 
(e.g., video graphic components) generates the Ultimaco 'SafeGuard Easy' GUI that 
controls the user authentication process (i.e., 'receiving a password through ...'), 
insofar as the associated bootable controlling software/operating system is powered up, 
encompassing the claimed limitations, as broadly interpreted by the examiner.']; 
after receiving said password, 

comparing said password to 

stored information using 

a graphic controller [figures 1-5 and accompanying descriptions, 
col. 1, lines 59 -col. 4, line 3, whereas the portable integrated computer 
system with associated touch screen, software configurable keyboard, 
optional memory configurations, installable applications, etc., comprising 
a microprocessor based controller and associated integrated peripheral 
logic/circuitry (e.g., video graphic components ' a graphic controller ') 
generates the Ultimaco 'SafeGuard Easy' GUI that controls the (pre-boot) 
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user authentication process (i.e., 'receiving ... comparing ... said 
password ... stored information using ... graphic controller '), insofar as 
the associated bootable controlling software/operating system is powered 
up, encompassing the claimed limitations, as broadly interpreted by the 
examiner.]; and 
booting an operating system after 
comparing said password to 

stored information [figures 1-5 and accompanying descriptions, col. 
1, lines 59-col. 4, line 3, whereas the system Ultimaco 'SafeGuard Easy' controls 
the user authentication process (i.e., 'booting ... after comparing ...'), insofar as 
the associated bootable controlling software/operating system is subsequently 
booted, encompassing the claimed limitations, as broadly interpreted by the 
examiner.].". 

Further, as per claim 11, this claim is the embodied method software for the method 
claim 1 above, and is rejected for the same reasons provided for the claim 1 rejection. 

6. Claim 3 additionally recites the limitation that; "The method of claim 1 including 
generating said graphical user interface 
using said graphics controller.". 
The teachings of Clough et al are directed towards such limitations (i.e., figures 1-5 and 
accompanying descriptions, col. 1, lines 59-col. 4,line 3, whereas the system touch screen, 
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associated integrated peripheral logic/circuitry (e.g., video graphic components encompassing 
the 'graphics controller' as an integrated component (i.e., on the main circuit board)) generates 
the Ultimaco 'SafeGuard Easy' GUI that controls the user authentication process, insofar as the 
associated bootable controlling software/operating system is powered up, encompassing the 
claimed limitations, as broadly interpreted by the examiner.). 

Further, as per claim 13, this claim is the embodied method software for the method 
claim 3 above, and is rejected for the same reasons provided for the claim 3 rejection. 

7. Claim 4 additionally recites the limitation that; "The method of claim 3 including 
storing information for 

generating said graphical user interface on 
an option memory.". 

The teachings of Clough et al are directed towards such limitations (i.e., figures 1-5 and 
accompanying descriptions, col. 1, lines 59-col. 4,line 3, whereas the system touch screen, 
associated integrated peripheral logic/circuitry (e.g., video graphic components encompassing 
the 'graphics controller' as an integrated component (i.e., on the main circuit board)) generates 
the Ultimaco 'SafeGuard Easy' GUI that controls the user authentication process, insofar as the 
integrated associated memory (e.g., system RAM, graphic controller registers and associated 
memory, etc.,) and peripheral memory (e.g., floppy, RAM sticks, memory cards, etc.,), 
encompasses the claimed limitations, as broadly interpreted by the examiner.). 
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Further, as per claim 14, this claim is the embodied method software for the method 
claim 4 above, and is rejected for the same reasons provided for the claim 4 rejection. 

8. Claim 5 additionally recites the limitation that; "The method of claim 3 including 
using boot code running on a graphics controller to 

generate the graphical user interface.". 
The teachings of Clough et al are directed towards such limitations (i.e., figures 1-5 and 
accompanying descriptions, col. 1, lines 59-col. 4,line 3, whereas the system touch screen, 
associated integrated peripheral logic/circuitry (e.g., video graphic components encompassing 
the 'graphics controller' as an integrated component (i.e., on the main circuit board)) generates 
the Ultimaco 'SafeGuard Easy' GUI that controls the user authentication process, insofar as the 
video graphic components, main circuit board with associated processor/program memory that 
controls the video graphic components, encompasses the claimed limitations, as broadly 
interpreted by the examiner.). 

Further, as per claim 15, this claim is the embodied method software for the method 
claim 5 above, and is rejected for the same reasons provided for the claim 5 rejection. 

9. Claim 6 additionally recites the limitation that; "The method of claim 3 wherein 
generating a graphical user interface includes 

generating a graphical user interface to 

enable the user to input said password.". 



Application/Control Number: 1 0/020,70 1 Page 8 

Art Unit: 2439 

The teachings of Clough et al are directed towards such limitations (i.e., figures 1-5 and 
accompanying descriptions, col. 1, lines 59-col. 4,line 3, whereas the system touch screen, 
associated integrated peripheral logic/circuitry generates the Ultimaco 'SafeGuard Easy' GUI that 
controls the user authentication process (' generating a graphical user interface . . . user to input a 
password ...'), encompassing the claimed limitations, as broadly interpreted by the examiner.). 

Further, as per claim 16, this claim is the embodied method software for the method 
claim 6 above, and is rejected for the same reasons provided for the claim 6 rejection. 

10. Claim 7 additionally recites the limitation that; "The method of claim 6 wherein 
generating a graphical user interface includes 
generating an on-screen keyboard.". 
The teachings of Clough et al are directed towards such limitations (i.e., figures 1-5 and 
accompanying descriptions, col. 1, lines 59-col. 4,line 3, and more particularly col. 2, lines 15-23, 
53-63, whereas the system touch screen, associated integrated peripheral logic/circuitry generates 
the Ultimaco 'SafeGuard Easy' GUI that controls the user authentication process (' generating a 
graphical user interface . . . generating an on-screen keyboard '), encompassing the claimed 
limitations, as broadly interpreted by the examiner.). 

Further, as per claim 17, this claim is the embodied method software for the method 
claim 7 above, and is rejected for the same reasons provided for the claim 7 rejection. 
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1 1 . Claim 8 additionally recites the limitation that; "The method of claim 1 including 
receiving inputs from the user 

through the graphical user interface 
without a keyboard.". 

The teachings of Clough et al are directed towards such limitations (i.e., figures 1-5 and 
accompanying descriptions, col. l,lines 59-col. 4,line 3, and more particularly col. 2,lines 15-23, 
53-63, whereas the system touch screen, associated integrated peripheral logic/circuitry generates 
the Ultimaco 'SafeGuard Easy' GUI that controls the user authentication process (' receiving 
inputs from the user . . . without a keyboard '), encompassing the claimed limitations, as broadly 
interpreted by the examiner.). 

Further, as per claim 18, this claim is the embodied method software for the method 
claim 8 above, and is rejected for the same reasons provided for the claim 8 rejection; 

12. Claim 9 additionally recites the limitation that; "The method of claim 1 including 
authenticating a user and 

allowing the operating system to boot if 
the user has been authenticated.". 
The teachings of Clough et al are directed towards such limitations (i.e., figures 1-5 and 
accompanying descriptions, col. 1, lines 59-col. 4,line 3, whereas the system Ultimaco 
'SafeGuard Easy' controls the user authentication process ('. . . authenticating a user ...'), insofar 
as the associated bootable controlling software/operating system is subsequently booted ('. . . 



Application/Control Number: 1 0/020,70 1 Page 1 0 

Art Unit: 2439 

allowing the operating system to boot if ...'), encompassing the claimed limitations, as broadly 
interpreted by the examiner.). 

Further, as per claim 19, this claim is the embodied method software for the method 
claim 9 above, and is rejected for the same reasons provided for the claim 9 rejection. 

13. Claim 10 additionally recites the limitation that; "The method of claim 9 including 
receiving a password entered 
without a keyboard 

using the graphical user interface.". 
The teachings of Clough et al are directed towards such limitations (i.e., figures 1-5 and 
accompanying descriptions, col. l,lines 59-col. 4,line 3, and more particularly col. 2,lines 15-23, 
53-63, whereas the system touch screen, associated integrated peripheral logic/circuitry generates 
the Ultimaco 'SafeGuard Easy' GUI that controls the user authentication process (' receiving a 
password entered . . . without a keyboard . . . using the graphical user interface '), encompassing 
the claimed limitations, as broadly interpreted by the examiner.). 

Further, as per claim 20, this claim is the embodied method software for the method 
claim 10 above, and is rejected for the same reasons provided for the claim 10 rejection. 



Response to Arguments 
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14. As per applicant's argument concerning the lack of the various teachings by Clough et al 
and Ultimaco, dealing with the lack of GUI functions prior to operating system boot ('. . . the 
pertinent timeframe ...'), the examiner has fully considered in this response to amendment; the 
arguments, and finds them not to be persuasive. 

At the very least, since the Clough et al computer is a general-purpose configurable, 
keyboard-less computer using a touch screen display (e.g., Abstract), and is typically 
configurable with known (i.e., industry standard, commercially available) operating systems 
(OS) such as MS-DOS (e.g., col. 7,lines 24-45); and such configurations comprise pre-boot setup 
(e.g., hit the DEL or a specific function key during powcr-up prior to the OS booting to go to an 
interactive setup screen) of the various hardware components particular to any given computer 
(e.g., which drive to subsequently boot from, serial port configuration, memory speed aspects, 
etc.,) compatible with said MS-DOS operating system via a GUI display used to configure said 
various hardware components (i.e., the default input/output, such as the touch screen display in 
the case of the Clough et al computer), therefore the references would be applicable in the 
rejection, such that the rejection support references collectively encompass the said claim 
limitations in their entirety. 

15. As per applicant's argument concerning the lack of the various teachings by Clough et al 
and Ultimaco, dealing with the graphics controller actually performing the comparison, the 
examiner has fully considered in this response to amendment; the arguments, and finds them not 
to be persuasive. 
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At the very least, the claim language does not mention that the comparison is performed 
by the graphic controller/processor; just that the graphic controller/processor (of which said 
controller/processor is an integral part of the Clough et al computer; irrespective of trusted 
platform configuration issues) is a part of the comparison aspect (i.e., the graphical user interface 
is clearly used for ' receiving a password thru a graphical user interface ' after the Ultimaco 
Safeguard Easy has been installed, and configured, prior to use during a subsequent power-up), 
as broadly interpreted by the examiner, and would therefore be applicable in the rejection, such 
that the rejection support references collectively encompass the said claim limitations in their 
entirety. 

16. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE MONTHS from 
the mailing date of this action. In the event a first reply is filed within TWO MONTHS of the 
mailing date of this final action and the advisory action is not mailed until after the end of the 
THREE-MONTH shortened statutory period, then the shortened statutory period will expire on 
the date the advisory action is mailed, and any extension fee pursuant to 37 CFR 1.136(a) will be 
calculated from the mailing date of the advisory action. In no event, however, will the statutory 
period for reply expire later than SIX MONTHS from the mailing date of this final action. 
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Conclusion 

17. Any inquiry concerning this communication or earlier communications from examiner 
should be directed to Ronald Baum, whose telephone number is (571) 272-3861, and whose 
unofficial Fax number is (571) 273-3861 and unofficial email is Ronald.baum@uspto.gov. The 
examiner can normally be reached Monday through Thursday from 8:00 AM to 5:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Edan Orgad, can be reached at (571) 272-7884. The Fax number for the organization 
where this application is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. For more information for 
unpublished applications is available through Private PAIR only. For more information about the 
PAIR system, sec http:/-'pair-dirq \ \ pjo y ) . Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

Ronald Baum 
Patent Examiner 
/R. B./ 

Examiner, Art Unit 2439 



/Edan Orgad/ 
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